Skip to content

Commit ce368b2

Browse files
committed
chore: add constraints to bump transitive versions to resolve CVEs
1 parent 7dcef76 commit ce368b2

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

plugins/stage-vote-release-plugin/build.gradle.kts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,14 @@ plugins {
2121
}
2222

2323
dependencies {
24+
constraints {
25+
api("commons-beanutils:commons-beanutils:1.11.0")
26+
api("commons-codec:commons-codec:1.18.0")
27+
api("commons-collections:commons-collections:3.2.2")
28+
api("net.sourceforge.nekohtml:nekohtml:1.9.22")
29+
api("org.apache.httpcomponents:httpclient:4.5.13")
30+
api("xerces:xercesImpl:2.12.2")
31+
}
2432
implementation(project(":plugins:crlf-plugin"))
2533
implementation(project(":plugins:license-gather-plugin"))
2634
implementation(project(":plugins:gradle-extensions-plugin"))

0 commit comments

Comments
 (0)